Last updated: March 16, 2026
onUI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
onUI is a platform that provides AI-powered features to web applications, including AI chat assistants, page generation, and report building. Our customers integrate these features into their own applications or use them directly through our dashboard.
This policy applies to our customers (organizations and individuals who use our platform) and to end-users who interact with AI features embedded in our customers' applications. If you are an end-user interacting with an AI feature powered by onUI within a third-party application, that application's operator is responsible for providing you with their own privacy notice. This policy describes how onUI handles data as a service provider.
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.
We collect information that you provide directly to us, including:
We automatically collect certain information about your device and how you interact with our Service:
To integrate onUI features into your application, we collect configuration metadata about your app via our CLI tool or manual data entry. This includes:
Note: We only collect public-facing metadata necessary for the integration to function. We do not access, store, or process your source code, proprietary business logic, or credentials.
onUI does not provide AI model access. You provide your own third-party API keys (OpenAI, Anthropic, Google, etc.) to use AI features. When you provide these keys:
When you use AI features through the Service, we store:
This data is stored persistently so you can access your full history. It is used solely to provide the Service to you.
onUI builds knowledge bases gradually through AI-powered interactions about your application's intent, data, and requirements. This information is processed into embeddings to power AI features. Knowledge base data is not uploaded by you directly — it is derived from your interactions with the Service.
We use the information we collect to:
We may use anonymized and aggregated profiling and metadata (such as usage patterns and feature adoption) for product improvement purposes. We do not use your actual content — including chat messages, reports, generated pages, or knowledge base data — for any purpose other than providing the Service to you.
We may share your information with third-party service providers who perform services on our behalf:
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred.
We implement appropriate technical and organizational measures to protect your personal information:
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
Your content (chat messages, reports, generated pages, knowledge base data) is stored persistently for as long as your account is active, so you can access your full history.
When you request account deletion, we will provide you with the opportunity to export your data before deletion. Your personal information and content will be deleted or anonymized within 30 days of your request, unless we are required to retain it for legal or regulatory purposes.
If your account is terminated by OnUI (e.g., for a violation of our Terms of Service or Acceptable Use Policy), your data will be deleted immediately upon termination.
If you are in the European Economic Area (EEA), we process your personal data under the following legal bases:
When onUI processes data on behalf of a customer (as a data processor), the customer is the data controller and determines the legal basis for processing. We process such data only in accordance with the customer's instructions and our Data Processing Agreement (DPA), available upon request.
If you are in the EEA, you have the following rights:
You also have the right to lodge a complaint with your local data protection supervisory authority.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
To exercise any of these rights, please contact us at privacy@onui.ai. We will respond within the timeframes required by applicable law.
We use only essential cookies required for the Service to function, such as authentication session cookies. We do not currently use any third-party analytics or tracking tools.
If we introduce analytics or tracking technologies in the future, we will update this policy and implement appropriate consent mechanisms where required by law.
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
Your data is stored in the European Union (EU West region). We do not transfer your data outside of the EU for storage or processing, except where necessary to provide the Service (e.g., when AI requests are sent to third-party providers using your own API keys, which may process data in other regions according to their own policies).
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
If you have questions about this Privacy Policy, please contact us:
Email: privacy@onui.ai
Data Protection Officer: dpo@onui.ai
Website: https://onui.ai